General

  • Target

    0976fa202dbca5915c19b5c64ee52c0f412023ca5e36bf248af70b4d48938235N

  • Size

    49KB

  • Sample

    241030-2fy95stnfr

  • MD5

    84e63751dcce88297cfdae111ed1b020

  • SHA1

    7ede73c969958ad17f20e6edcd5f3908b92993f7

  • SHA256

    0976fa202dbca5915c19b5c64ee52c0f412023ca5e36bf248af70b4d48938235

  • SHA512

    149401fe32f0a44bbef51e2186a18b8ef5c8e2dd85ca8d45c36b9258c5357115ca62423f357886e38711e0a35d83cdfe0a928ce1b549d901408b6ea32f456fa4

  • SSDEEP

    1536:834/PC7Ruz3hRXRASULZ6JKYdbzcmhCZnc:It7R8fU6n8c

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      0976fa202dbca5915c19b5c64ee52c0f412023ca5e36bf248af70b4d48938235N

    • Size

      49KB

    • MD5

      84e63751dcce88297cfdae111ed1b020

    • SHA1

      7ede73c969958ad17f20e6edcd5f3908b92993f7

    • SHA256

      0976fa202dbca5915c19b5c64ee52c0f412023ca5e36bf248af70b4d48938235

    • SHA512

      149401fe32f0a44bbef51e2186a18b8ef5c8e2dd85ca8d45c36b9258c5357115ca62423f357886e38711e0a35d83cdfe0a928ce1b549d901408b6ea32f456fa4

    • SSDEEP

      1536:834/PC7Ruz3hRXRASULZ6JKYdbzcmhCZnc:It7R8fU6n8c

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks